HIPAA Compliance Assessor/Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Identify Electronic Protected Health Information (ePHI): Locate all systems that store sensitive data.

• Identify Threats and Vulnerabilities: Assess potential and reasonably foreseeable threats.

• Assess Security Measures: Review existing safeguards for effectiveness.

• Determine Likelihood and Impact: Analyze the probability and consequences of potential breaches.

• Document and Prioritize Findings: Develop a formal report along with a risk mitigation strategy.

⛳️ Requirements

• At least 5 years of experience in HIPAA Assessments and Reporting.

• Over 5 years of familiarity with HIPAA guidelines, including NIST Special Publication 800-66 Rev. 2, NIST Cyber Security Framework to HIPAA Security Rule Crosswalk, and HITRUST.

• Practical experience in conducting privacy assessments/audits, including PIA/DPIA.

• In-depth knowledge of data flows, data lifecycle, and user data management in web and mobile applications.

• Experience evaluating consumer-facing systems (applications, websites), as well as examining consent, transparency, and privacy controls.

• Capability to translate regulations into actionable findings and recommendations.

🏝️ Benefits

• Flexible working hours.

• Project-based assignments.